Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qNMJOITtYVo5dX_2iTwxDJkNJDw.roa
File: qNMJOITtYVo5dX_2iTwxDJkNJDw.roa (raw, json)
Hash identifier: rAcEygPKeYJMC16y01FUuVKHGmJbd2IOmGBNyRq2ao8=
Subject key identifier: A8:D3:09:38:84:ED:61:5A:39:75:7F:F6:89:3C:31:0C:99:0D:24:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C153C370B09C89759F8CA1A1DB19D468
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qNMJOITtYVo5dX_2iTwxDJkNJDw.roa
Signing time: Fri 04 Aug 2023 16:13:59 +0000
ROA not before: Fri 04 Aug 2023 16:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c1:53:c3:70:b0:9c:89:75:9f:8c:a1:a1:db:19:d4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 16:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8d3093884ed615a39757ff6893c310c990d243c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a7:20:e8:8b:2d:c2:40:93:b8:f0:e1:15:f1:
80:70:38:2f:06:d1:5e:69:7b:bd:79:63:b1:b0:e0:
1b:f5:ee:60:41:02:1f:87:3b:82:44:b9:f3:e0:a2:
76:07:e4:38:15:94:70:07:81:2b:11:f2:b5:da:eb:
21:a7:59:d5:32:c5:9a:82:9e:cd:ff:40:72:b5:42:
66:03:03:67:ab:59:be:fe:24:3c:83:2c:75:e3:5a:
ec:e5:30:bb:aa:80:d2:a5:58:b6:3d:45:dd:bb:96:
c3:6f:77:6b:78:d3:b7:96:ee:c3:43:48:0b:6d:cc:
e8:22:7c:92:fd:ee:59:8b:cc:33:0f:aa:4e:85:04:
06:95:18:bc:fa:09:75:c8:a5:ee:9a:b0:cc:dd:21:
f2:66:fa:07:b4:34:6d:76:b6:01:da:9d:00:e3:f5:
63:77:70:73:f9:af:ab:f0:f1:7a:91:fd:2e:c3:8f:
7b:13:1b:c3:a0:9e:ab:ce:bf:39:7d:72:12:d4:ca:
27:07:d5:91:01:0d:a3:cb:53:3b:7a:92:f2:e5:23:
dc:2e:f7:87:70:b9:2c:ff:fc:31:da:37:93:a5:67:
09:18:cd:59:23:26:cd:27:73:cd:07:02:9f:6f:bc:
e1:b7:75:01:77:68:b6:06:cb:1f:4a:90:b4:61:fb:
70:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D3:09:38:84:ED:61:5A:39:75:7F:F6:89:3C:31:0C:99:0D:24:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qNMJOITtYVo5dX_2iTwxDJkNJDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:a1:27:31:69:21:00:91:e0:4e:f1:7c:b3:a5:8f:05:84:d1:
51:58:f4:9e:6d:1b:c1:71:cf:ab:97:77:98:9c:0b:06:d4:86:
e4:0c:b9:cc:8e:fe:7e:52:b0:5e:79:ae:a0:14:92:b3:fa:e1:
f4:a7:e5:60:01:b4:28:0d:88:11:9a:d6:96:73:d8:aa:59:4f:
b1:c3:df:db:62:b5:01:8f:31:13:49:7d:d9:c6:f0:bd:d9:ea:
4a:d4:62:55:1f:b9:96:04:68:05:98:08:23:64:99:34:44:63:
91:f2:90:6d:d7:6b:5f:b1:dd:da:a5:25:ff:8a:a7:b7:de:8e:
3e:45:53:12:59:e4:c8:d6:e1:30:22:01:3e:34:cf:8c:42:2c:
56:47:80:9b:cc:b1:9a:44:fb:04:80:4b:2a:9e:89:4f:49:55:
77:6b:63:de:aa:23:6b:c3:93:af:84:05:70:ed:60:f0:0c:7a:
c3:b9:03:75:79:a5:9e:e4:de:1c:40:99:cd:a2:89:d9:d5:d4:
f7:aa:c8:a4:da:06:03:39:68:18:2c:99:c3:59:cd:4b:05:8f:
ca:9b:6e:f2:28:ff:9e:37:ad:8c:7a:64:80:c4:04:6a:b4:f9:
8f:79:81:14:a4:6f:10:73:8a:67:1c:ef:eb:25:df:c9:49:22:
32:7d:15:9d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnBU8NwsJyJdZ+MoaHbGdRoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA0MTYxMzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGQzMDkzODg0ZWQ2MTVhMzk3NTdmZjY4OTNjMzEwYzk5MGQyNDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKcg6IstwkCTuPDhFfGAcDgvBtFe
aXu9eWOxsOAb9e5gQQIfhzuCRLnz4KJ2B+Q4FZRwB4ErEfK12ushp1nVMsWagp7N
/0BytUJmAwNnq1m+/iQ8gyx141rs5TC7qoDSpVi2PUXdu5bDb3dreNO3lu7DQ0gL
bczoInyS/e5Zi8wzD6pOhQQGlRi8+gl1yKXumrDM3SHyZvoHtDRtdrYB2p0A4/Vj
d3Bz+a+r8PF6kf0uw497ExvDoJ6rzr85fXIS1MonB9WRAQ2jy1M7epLy5SPcLveH
cLks//wx2jeTpWcJGM1ZIybNJ3PNBwKfb7zht3UBd2i2BssfSpC0YftwJwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKjTCTiE7WFaOXV/9ok8MQyZDSQ8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcU5NSk9JVHRZVm81ZFhfMmlUd3hESmtOSkR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK+hJzFpIQCR4E7xfLOl
jwWE0VFY9J5tG8Fxz6uXd5icCwbUhuQMucyO/n5SsF55rqAUkrP64fSn5WABtCgN
iBGa1pZz2KpZT7HD39titQGPMRNJfdnG8L3Z6krUYlUfuZYEaAWYCCNkmTREY5Hy
kG3Xa1+x3dqlJf+Kp7fejj5FUxJZ5MjW4TAiAT40z4xCLFZHgJvMsZpE+wSASyqe
iU9JVXdrY96qI2vDk6+EBXDtYPAMesO5A3V5pZ7k3hxAmc2iidnV1PeqyKTaBgM5
aBgsmcNZzUsFj8qbbvIo/543rYx6ZIDEBGq0+Y95gRSkbxBzimcc7+sl38lJIjJ9
FZ0=
-----END CERTIFICATE-----
Generated at Thu May 1 20:35:41 2025 by rpki-client